Managing firmware versions Reverting to a previous firmware image
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903 155
http://docs.fortinet.com/ • Feedback
Verifying the downgrade
After successfully downgrading to a previous firmware, verify your connections and
settings. If you are unable to connect to the web-based manager, make sure your
administration access settings and internal network IP address are correct. The
downgrade may change your configuration settings to default settings.
Downgrading to a previous firmware through the CLI
When downgrading to a previous firmware, only the following settings are retained:
• operation mode
• Interface IP/Management IP
• route static table
• DNS settings
• VDOM parameters/settings
• admin user account
• session helpers
• system accprofiles.
If you have created additional settings in FortiOS 4.0, make sure you back up your
configuration before downgrading. For more information, see “Backing up your
configuration” on page 148.
The following procedure assumes that you have already downloaded the firmware image
to your management computer.
To downgrade through the CLI
1 Copy the new firmware image file to the root directory of the TFTP server.
2 Start the TFTP server.
3 Log in to the CLI.
4 Enter the following command to ping the computer running the TFTP server:
execute ping <server_ipaddress>
Pinging the computer running the TFTP server verifies that the FortiGate unit and
TFTP server are successfully connected.
5 Enter the following command to copy the firmware image from the TFTP server to the
FortiGate unit:
execute restore image tftp <name_str> <tftp_ipv4>
Where <name_str> is the name of the firmware image file and <tftp_ipv4> is the
IP address of the TFTP server. For example, if the firmware image file name is
image.out and the IP address of the TFTP server is 192.168.1.168, enter:
execute restore image tftp image.out
192.168.1.168
The FortiGate unit responds with the message:
This operation will replace the current firmware version! Do you
want to continue? (y/n)
Caution: Always back up your configuration before installing a patch release,
upgrading/downgrading, or when resetting to factory defaults.